Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft
File: WBE1OPP_XM76JqEG222MbLwCoZ8.mft (raw, json)
Hash identifier: d1EJkLY8EQmVazdxS8QSIRPKE6YlEArZXrpfPBgmDB4=
Subject key identifier: 22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06
Authority key identifier: 58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F
Certificate issuer: /CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F
Certificate serial: 09B0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft
Manifest number: 09B0
Signing time: Wed 05 Nov 2025 10:12:43 +0000
Manifest this update: Wed 05 Nov 2025 10:12:43 +0000
Manifest next update: Wed 05 Nov 2025 16:12:43 +0000
Files and hashes: 1: WBE1OPP_XM76JqEG222MbLwCoZ8.crl (hash: urqhJCUpiHyIbKbpwEfbLVrOYq7xGWG52Ee9F4CkirM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2480 (0x9b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F
Validity
Not Before: Nov 5 10:12:43 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=22397420AA3CFFCFBCE8B2FD94D32408B1688B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:d9:3e:3e:32:2a:ec:41:f4:fc:57:14:a9:
88:cc:43:6a:cd:85:32:04:bd:91:0d:88:7a:fc:79:
3f:50:4c:68:e9:49:ea:36:50:53:5a:ee:96:31:ee:
6e:3a:ac:2c:e2:98:7c:11:16:1e:bc:b5:b3:82:38:
b3:04:99:4b:b7:a5:8f:3c:bc:d2:c9:43:53:62:1b:
89:d1:ff:5f:0f:65:5d:35:fc:88:d7:86:d4:41:08:
ec:f0:4f:06:d6:f4:1c:bf:51:4a:e9:08:66:50:c7:
bd:2d:c3:50:44:de:3b:9d:fd:33:00:ec:7f:42:2e:
ec:a1:00:d3:ec:43:d6:2c:8a:90:10:62:87:77:cf:
6b:b6:56:77:7f:76:11:f7:25:72:d5:70:d7:32:bc:
c9:35:e5:30:94:38:c1:2b:63:a4:56:eb:14:89:03:
88:d5:d7:1a:ef:cc:ab:97:8c:95:7b:06:ff:1a:ba:
d5:46:48:f9:50:98:33:db:cd:eb:76:e0:7f:9c:e3:
dd:4c:1b:18:32:cb:21:0d:f3:03:09:97:ef:31:f0:
6c:10:3b:46:73:7f:c5:1c:54:9c:97:d0:36:f3:99:
89:60:98:c5:ed:a5:61:56:d3:ce:dd:38:f2:6f:56:
20:5a:6b:95:7a:9b:fd:86:4f:81:a4:27:33:40:13:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06
X509v3 Authority Key Identifier:
keyid:58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cc:fc:5e:5e:a6:a5:70:81:e7:6e:c0:c1:da:73:81:2f:74:
ad:ea:eb:cf:3f:86:58:20:af:9d:19:85:2c:a6:f8:58:2d:82:
98:b8:e8:fb:36:05:08:03:9d:4f:25:49:fa:0d:5f:67:a2:f8:
a5:0f:3a:8f:1b:d4:65:95:08:f7:30:a9:5c:b0:6b:8b:21:49:
f3:6c:d4:cd:41:d6:12:7c:ef:21:68:70:88:34:9c:7e:68:ce:
b9:45:41:28:d8:ec:93:92:29:65:61:57:73:c4:40:38:a7:3d:
48:65:fc:3b:79:09:2f:92:16:4b:66:3f:ce:ae:14:0d:93:bd:
90:ac:0e:ba:1e:94:85:4d:d7:99:a8:88:21:f6:9c:fe:9b:04:
b1:2b:45:33:a0:49:d5:bd:7c:3f:1b:fa:1d:7e:f3:9a:1f:13:
f1:ee:1a:ba:3f:9f:ed:81:95:e6:6d:de:93:3a:3d:f6:e3:65:
96:f2:cb:98:c8:09:f1:0e:ec:1b:39:3b:df:9b:b2:a4:6d:13:
35:e7:ba:4a:ad:07:e1:b2:89:02:bc:6f:1b:36:71:6e:2e:a5:
17:1f:aa:83:08:15:22:af:12:64:4c:67:3c:3f:ec:80:68:71:
2b:14:fc:2b:8b:b7:eb:08:c0:38:8e:63:df:33:ff:39:32:b1:
59:66:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:28:54 2025 by rpki-client